Infinidat Cryptographic Module Got FIPS 140-2 Validation

Infinidat Ltd announced that its cryptographic module for the InfiniBox and InfiniGuard has been awarded Federal Information Processing Standards (FIPS) 140-2 validation.

The designation validates Infinidat’s cryptographic technologies which certify its storage and backup systems for use in a defined set of government and regulated industries’ IT projects.

FIPS 140-2 validation is a requirement for products implementing a cryptographic module that processes sensitive information and is used within the federal government. The standard is a joint effort by the National Institute of Standards and Technology (NIST) in the US and the Communications Security Establishment Canada (CSEC) under the Canadian government while gaining recognition as a benchmark for third-party validation of cryptographic-enabled products of all kinds.

To facilitate the certification process, the storage vendor partnered with security certification solutions provider Corsec Security, Inc.

For two decades, Corsec has assisted companies through the IT security certification process for FIPS 140-2, Common Criteria and the Department of Defense’s APL.

“Completion of the FIPS 140-2 validation process is a testament to Infinidat’s commitment to the storage needs of the U.S. government,” said Jake Nelson, director of marketing, Corsec. “Infinidat’s adherence to security standards and U.S. government regulations should provide users with the peace of mind that they are being protected with a high degree of security, assurance, and dependability.“

Data breaches are increasing in the IT stack – from user-level email attacks to data corruption and ransomware attacks to the theft of data as it is transported across unencrypted networks. End-to-end encryption, whether in the hypervisor, database or application, provides high level of data protection. Many customers hoping to adopt end-to-end encryption are limited due to their dependency on data reduction in their AFAs. InfiniBox architecture allows these customers to securely consolidate their data while supporting end-to-end encryption.

“Infinidat has always worked to eliminate the trade-offs between cost, performance and availability. We are expanding on that effort to incorporate data security, at the highest standards, enabling customers to keep their data secure hroughout its lifecycle,” said Brian Carmody, Infinidat CTO. “Our ‘scale to win’ architecture supports FIPS-validated encryption at any layer of the IT stack while providing faster-than-all-flash performance and 100% data availability without penalizing cost or performance.“